Token-Based Authentication for DASH Streaming Segments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Digital Rights Management (DRM) systems are inadequate for protecting content in dynamic adaptive streaming over HTTP (DASH) as they are designed for static file downloads and do not support dynamic user-server interactions, failing to provide effective content protection during streaming applications.
Innovation Solution
Implementing dynamic token-based authentication and authorization signaling mechanisms to protect each content segment during streaming by obtaining, embedding, and verifying authorization tokens within content request messages, ensuring only authorized access to media segments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If DRM is used to protect content, then content security is improved, but it does not support dynamic user-server interactions in streaming applications
Solution Approach 1:
The patent transforms the static DRM protection model into a dynamic one by implementing token-based authentication and authorization that evolves with each streaming interaction. Tokens are generated dynamically based on user credentials, segment identifiers, and expiration times, allowing the system to adapt to real-time streaming requirements while maintaining security.
Solution Approach 2:
The patent segments the content protection mechanism by separating authentication (verifying user identity) from authorization (granting access rights), and further dividing authorization into segment-specific tokens. This allows different security levels for different content segments while supporting dynamic user-server interactions.
2Reliability
If token-based authentication is implemented for each content segment, then content protection is enhanced, but system complexity increases
Solution Approach 1:
The patent creates a universal token structure that can be applied across all content segments and user types. The authentication server implements a multi-functional system that handles both authentication and authorization through a unified token generation process, reducing the need for separate complex systems while enhancing content protection.
3Reliability
If authentication and authorization tokens are verified for each media segment request, then access control is improved, but processing time increases
Solution Approach 1:
The patent performs authentication preliminarily by generating authorization tokens that are valid for specific time periods and content segments. This preliminary authentication eliminates the need for repeated authentication queries during streaming, reducing processing time while maintaining strict access control through token validation.
Solution Approach 2:
The patent implements segment-specific authorization tokens that contain only the necessary validation information for particular content segments. This local quality approach allows fast verification by including only relevant segment identifiers and access rights in each token, minimizing processing overhead while maintaining precise access control.
Data Source
AI summary
A method implemented by a network element (NE) configured as a streaming client, the method comprising obtaining, via a processor of the NE, a first authorization token for accessing a first media segment located on a content server, embedding, via the processor, the first authorization token in a first content request message for accessing the first media segment located on the content server, sending, via a transmitter of the NE to the content server, the first content request message comprising the first authorization token to request the first media segment, and receiving, via a receiver of the NE from the content server, the first media segment when the first authorization token is valid for accessing the first media segment located on the content server.